Plugin

vanta-mcp-plugin

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with your local repository context to help you fix compliance failures faster. What it does: - Connects to Vanta's hosted MCP server via OAuth, giving Claude access to your tests, controls, vendors, vulnerabilities, policies, and framework requirements - Adds a remediation skill that pulls test-specific remediation instructions from Vanta and combines them with your local repo to generate targeted IaC fixes - Includes slash commands for streamlined test remediation workflows Skills: - Remediation — Describe a failing test or paste a test ID, and the plugin generates step-by-step remediation guidance. For IaC tests, it scans your repo and produces ready-to-apply code fixes for Terraform, Pulumi, CloudFormation, CDK, and other IaC tools. Slash commands: /vanta:list-tests — View failing compliance tests, prioritized by what you can fix from your current repo /vanta:fix-test <testId> — Generate an IaC fix and open a pull request for a specific failing test

• Published source
• Repository

Analysed

11 October 2026

Last observed

11 October 2026

What the code does

Static analysis found none of the capabilities we track, such as shell commands, network requests or file writes, in the latest version.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.